Internet security

• The 128-bit SSL certificate
• The Extended Validation SSL (EVSSL) certificate
• User ID and password
• Limited number of log-on attempts

The 128-bit SSL certificate (Secure Socket Layer)

Your information is encrypted in an unreadable form before it is sent out via the Internet. There are two levels of encryption: 40-bit (standard) and 128-bit (very high).

The HSBC Group’s e-banking websites use the 128-bit SSL (Secure Socket Layer) certificate, which is the highest encryption level authorised in France.

Good to know
If you see “https” in the address bar (i.e., https://address) or a key or padlock icon in the lower right-hand corner of your browser, this means that the website you are on has been encryption-secured and that the information that you enter is protected.

The Extended Validation SSL (EVSSL) certificate

What is this certificate for?
The EVSSL certificate enhances the security of e-banking websites, beginning with the log-on page itself. This additional layer of security helps us join our clients in combating phishing and pharming, in a very simple way.

How do I know that a website is EVSSL-protected?
It’s very easy too see: if the address bar turns green, you will know that you are on the real website (see illustrations below).
However, if you logged on to a copy of the website, the address bar turns red, thus indicating that you are the victim of phishing or pharming. This method of identification is simple and effortless.

with Internet Exporer 7 :

with FireFox 3 :

with Opéra 9.5 :

How do I use the certificates?
You must have a compatible browser:
- Internet Explorer 7 or later versions download / update
- Mozilla Firefox 3 or later versions download / update
- Opera 9.5 or later versions download / update

User ID and password

To access your e-banking services, you must identify yourself via your user ID and your password. The HSBC Group will grant you access after checking that they are valid and correct.
Your Internet banking logon information is your access to your accounts online, on mobile phone and when you call the Call Centre. Keep your logon information confidential.
Your password is the key to your online account information. Protect and change your password on a regular basis — every 30-60 days is a good guideline. Create a password that is unique to you and that cannot be easily guessed by someone else. Your password is the key to your online account information. Protect and change your password on a regular basis — every 30-60 days is a good guideline. Create a password that is unique to you and that cannot be easily guessed by someone else. Do not associate your password with anything such as birth dates, telephone numbers, or other familiar numbers. Memorize your password and never write it down or reveal it to anyone.

Note: No one at HSBC will ever ask you for your password. Never give out personal information to anyone on the telephone or from a website unless you have verified the credibility of the source or have initiated the call to a trusted source. Reputable companies won’t ask you for your password or Personal Identification Number(s) (PIN) through email or over the telephone. HSBC will never ask you for your password or PIN and you should contact the bank if you receive unusual telephone inquiries regarding your accounts or unusual online requests for account information.

Always remember to logoff from Internet Banking and close your browser when you have finished your online banking session. This helps to prevent others from being able to view your information at a later time.
Please contact us immediately if you suspect any unusual account activity.

Limited number of log-on attempts

For even more security, we track the number of log-on attempts. After a certain number of incorrect password attempts, we will block access to your account. To re-establish access, contact your branch or the Customer Service Centre at 0 810 2 4 6 8 10 (cost of a local call from a fixed-line phone in France).